QC Pics & Filing Assistant - Mobile App Privacy Policy

1. Introduction

This Mobile App Privacy Policy explains how JASSCO ("we", "us", or "our"), powered by TurbineWorks, LLC, collects, uses, and shares information when you use the QC Pics and Filing Assistant mobile applications (the "Apps").

2. Scope

This policy applies to information collected through the QC Pics and Filing Assistant Apps. Our website privacy practices are described separately in the Website Privacy Policy on turbineworks.com/terms.

3. Information We Collect

The QC Pics and Filing Assistant Apps are designed specifically for aviation quality control and inspection documentation. We collect the following categories of information:

3.1 Account and Authentication Data

• Name, email address, username
• Company/organization name
• Role/permissions (e.g., Admin/User, Inspector, Supervisor)

3.2 Aviation Operational Content

• Photos and Images: Aircraft part photos, inspection images, before/after photos
• Work Order Data: Invoice numbers, work order IDs, batch identifiers
• Part Information: Barcode values, serial numbers, part numbers
• Inspection Data: Defect annotations, severity ratings, inspection notes
• Generated Documents: PDF reports, inspection certificates
• Metadata: Notes, tags, batch names, timestamps, GPS location (if enabled)

3.3 Device and App Usage Data

• Device model, operating system, app version
• Basic diagnostics, performance data
• Timestamps, sync logs
• Feature usage patterns

3.4 Apple In-App Purchase and Subscription Data

When you purchase a subscription through the Apple App Store, we collect and store:

Transaction Information:

• Original transaction ID (unique purchase identifier)
• Current transaction ID
• Web order line item ID
• Purchase receipts and receipt validation data

Subscription Details:

• Product ID (monthly or yearly subscription)
• Subscription status (trial, active, expired, cancelled, pending)
• Billing cycle information (monthly/yearly)
• Current billing period start and end dates
• Subscription expiration dates

Subscription Management:

• Auto-renewal preferences
• Trial period status and trial end dates
• Billing retry status
• Cancellation dates
• Refund status

Subscription History:

• All subscription events (purchases, renewals, cancellations, expirations)
• Subscription lifecycle tracking
• Previous subscription periods

License and Access Control:

• License type (individual)
• License status
• Access level permissions
• Feature access rights

Subscription Analytics:

• Usage metrics tied to subscription (inspections count, photos count)
• Subscription performance data
• Feature usage patterns by subscription tier

Receipt Validation:

• Failed receipt validation attempts (for debugging)
• Error messages and codes from validation failures
• Retry attempts and resolution status

3.5 Customer Support Communications

• Support emails, attachments, screenshots
• Bug reports and issue descriptions

What We Do NOT Collect

The Apps are not designed to collect sensitive personal information (such as government ID numbers, financial account numbers, or biometric identifiers beyond device-level Face ID/Touch ID) unless your organization intentionally includes such information in uploaded content. We recommend avoiding upload of sensitive personal information unless strictly necessary for your aviation compliance processes.

Important: We never see or store your credit card, debit card, or any payment method details. All payment processing is handled exclusively by Apple through the App Store.

4. How We Use Information

We use the information collected through QC Pics and Filing Assistant to:

4.1 Core App Functionality

• Provide Core Features: Capture inspection photos, create batches, scan barcodes, mark defects, generate PDF reports, sync data across devices, organize files
• Authenticate and Authorize: Verify users and enforce role-based access controls
• Store and Organize: Maintain operational records for your organization's quality control processes
• Enable Integrations: Sync with ERP systems (AvSight, Quantum, Pentagon, Quick Aviation, OneDrive, SharePoint) when configured
• Maintain Security: Prevent fraud, detect misuse, troubleshoot problems, maintain system integrity
• Improve the Apps: Enhance performance, reliability, and user experience
• Provide Support: Respond to questions, requests, and technical issues

4.2 Subscription and Billing Management

We use subscription data to:

• Verify active subscription status
• Provide access to premium features based on subscription
• Track subscription lifecycle (trial → active → expired)
• Process subscription renewals and cancellations
• Handle billing retry attempts
• Comply with Apple App Store subscription guidelines
• Provide customer support for subscription and billing issues
• Generate subscription analytics (conversion rates, renewal rates, churn analysis)
• Track feature usage by subscription tier
• Monitor subscription health and billing issues

5. How We Share Information

We may share information in the following ways:

5.1 Service Providers

We use trusted vendors for:

• Cloud Hosting: Supabase (database and authentication) - backend databases, user management
• File Storage: AWS S3 (via Supabase) - photo and document storage
• Infrastructure: Logging, monitoring, and performance management
• Payment Processing: Apple App Store (in-app purchase processing) -Apple Privacy Policy

These providers process data only to provide services to us and are subject to contractual confidentiality obligations.

Note: Apple processes all payments; we receive transaction IDs and receipts but never see credit card information or payment method details.

5.2 Within Your Organization

If your organization uses the Apps, your administrators and supervisors may have access to:

• User accounts and permissions management
• Inspection records and operational data
• Company-wide batches and photos
• Reports and analytics

5.3 ERP System Integrations

When you configure ERP integrations (AvSight, Quantum, Pentagon, Quick Aviation, OneDrive, SharePoint), inspection data may be synced bidirectionally with your ERP system according to your configuration settings.

5.4 Legal and Safety

We may disclose information if required to comply with:

• Law, regulation, legal process, or governmental request
• FAA, EASA, or other aviation regulatory requirements
• Protection of rights, property, and safety of TurbineWorks, users, or others

5.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

5.6 Apple App Store Integration

When you purchase a subscription through the Apple App Store:

What Apple Shares With Us:

• Apple sends us server-to-server notifications about subscription events
• We receive transaction IDs, receipts, and subscription status updates
• Apple notifies us of renewals, cancellations, expirations, and refunds
• We receive billing retry notifications and grace period information

What Apple Processes:

• Apple processes all payment information through the App Store
• We never see or store your credit card or payment method details
• Apple's privacy policy governs payment processing
• You can manage subscriptions in your Apple ID Account Settings

Subscription Notifications We Receive:

• New subscriptions and initial purchases
• Successful renewals
• Failed renewal attempts
• Subscription cancellations
• Subscription expirations
• Grace period notifications
• Refund notifications
• Auto-renewal status changes

We do not sell your personal information.

6. Data Retention

Active Accounts: We retain information as long as your account is active and for legitimate business purposes.

Account Deletion: When you delete your account:

• Data is marked for deletion within 30 days
• Backups may persist for up to 90 days
• Some data may be retained longer for aviation compliance and legal requirements (FAA/EASA record-keeping mandates)

6.1 Specific Retention Periods

• Subscription data: Retained for duration of subscription plus 7 years (financial compliance)
• Transaction receipts: 7 years (required for financial auditing)
• Subscription events: 3 years (for dispute resolution)
• Failed receipt validations: Until resolved or 90 days
• Subscription metrics: 3 years (for business analytics)
• Aviation inspection records: Per FAA/EASA requirements (typically 2-7 years depending on record type)

Organization Policies: Your organization may have its own retention policies for aviation inspection records that supersede general data retention practices.

7. Security

We implement multiple layers of security to protect aviation quality control data:

7.1 Data Encryption

• All data encrypted in transit (TLS 1.3)
• Passwords hashed with bcrypt
• Database encryption at rest

7.2 Access Controls

• Role-based access control (RBAC)
• Multi-factor authentication available
• Face ID / Touch ID support
• Regular access audits

7.3 Infrastructure Security

• Supabase/AWS security infrastructure
• Regular security updates
• Vulnerability scanning
• 24/7 system monitoring

Note: No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we implement industry-standard practices for aviation data protection.

8. Your Choices & Rights

Depending on your location and applicable laws, you may have the following rights:

8.1 Rights for All Users

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request account and data deletion (subject to aviation record-keeping requirements)
• Export: Download your data in portable format
• Object: Object to certain data processing

8.2 GDPR Rights (EEA Users)

European users have additional rights under GDPR including right to rectification, erasure, data portability, and to lodge a complaint with their data protection authority.

8.3 CCPA Rights (California Users)

California residents have rights to know what data we collect, delete personal information, and non-discrimination for exercising rights.

8.4 How to Exercise Your Rights

• Organization-Managed Accounts: If your account is managed by your organization, please contact your administrator first.
• Direct Requests: Contact us at sales@turbineworks.com
• In-App: Settings → Privacy → Data Requests (if available)
• Response Time: Within 30 days

9. Children's Privacy

QC Pics and Filing Assistant are professional business applications intended for aviation industry professionals. The Apps are not intended for use by children under the age of 18. We do not knowingly collect personal information from children.

10. International Transfers

If you use the Apps from outside the United States, your information may be transferred to and processed in:

• United States (primary Supabase/AWS servers)
• Other jurisdictions where our service providers operate

Those jurisdictions may have different data protection laws than your home country. We use Standard Contractual Clauses (SCCs) and other appropriate safeguards for international transfers.

11. Contact Us

For questions about this Privacy Policy, or to request access, correction, or deletion, contact us at: